NEAS[.]fe2277378837aebb648ce52b80a25ac0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.fe2277378837aebb648ce52b80a25ac0.exe
Size

66KB
MD5

fe2277378837aebb648ce52b80a25ac0
SHA1

614a331582094497edde79d87d1eee1f8a675269
SHA256

72fcb5d56ec6cd675a7d35c06d7692118090c0a4d8670ee3793c32167f34d335
SHA512

4018dfd7e27046b2d565b3e5d801fe06b990c445d8bdf27afed3a01cc935f8bbcb2afb2240c99b9045887e1a03bea3079c1575d24432caeb1316118c8239e12f
SSDEEP

1536:z7+omOfmaRc01aMn1ebkJB9ZWIu0CApHgYZ6LKRn8G/XaiqUV:z7DmOeam01N19GIpHg92Xa/UV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.fe2277378837aebb648ce52b80a25ac0.exe

Files

NEAS.fe2277378837aebb648ce52b80a25ac0.exe
.exe windows:4 windows x86

ace714a1294cf55524310344ebce4074

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceTypesW
CreateMutexExW
BuildCommDCBAndTimeoutsW
CommConfigDialogW
MoveFileA
FindNextVolumeW
SetProcessInformation
CopyFileExW
SetProcessDEPPolicy
GetFirmwareType
RegCreateKeyExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE